Amazon SAA-C02 Online Practice Questions and Exam Preparation

Amazon SAA-C02 Online Questions & Answers

• Question 551:

  A company runs a containerized application on a Kubernetes cluster in an on-premises data center. The company is using a MongoDB database for data storage. The company wants to migrate some of these environments to AWS, but no code changes or deployment method changes are possible at this time. The company needs a solution that minimizes operational overhead.

  Which solution meets these requirements?

  A. Use Amazon Elastic Container Service (Amazon ECS) with Amazon EC2 worker nodes for compute and MongoDB on EC2 for data storage.
  B. Use Amazon Elastic Container Service (Amazon ECS) with AWS Fargate for compute and Amazon DynamoDB for data storage.
  C. Use Amazon Elastic Kubernetes Service (Amazon EKS) with Amazon EC2 worker nodes for compute and Amazon DynamoDB for data storage.
  D. Use Amazon Elastic Kubernetes Service (Amazon EKS) with AWS Fargate for compute and Amazon DocumentDB (with MongoDB compatibility) for data storage.
  D. Use Amazon Elastic Kubernetes Service (Amazon EKS) with AWS Fargate for compute and Amazon DocumentDB (with MongoDB compatibility) for data storage.

  ---

  Explanation/Reference:

• Question 552:

  A company requires that all versions of objects in its Amazon S3 bucket be retained Current object versions will be frequently accessed during the first 30 days, after which they will be rarely accessed and must be retrievable within 5 minutes Previous object versions need to be kept forever, will be rarely accessed, and can be retrieved within 1 week. All storage solutions must be highly available and highly durable.

  What should a solutions architect recommend to meet these requirements in the MOST cost- effective manner?

  A. Create an S3 lifecycle policy for the bucket that moves current object versions from S3 Standard storage to S3 Glacier after 30 days and moves previous object versions to S3 Glacier after 1 day.
  B. Create an S3 lifecycle policy for the bucket that moves current object versions from S3 Standard storage to S3 Glacier after 30 days and moves previous object versions to S3 Glacier Deep Archive after 1 day
  C. Create an S3 lifecycle policy for the bucket that moves current object versions from S3 Standard storage to S3 Standard-infrequent Access (S3 Standard-IA) after 30 days and moves previous object versions to S3 Glacier Deep Archive after 1 day
  D. Create an S3 lifecycle policy for the bucket that moves current object versions from S3 Standard storage to S3 One Zone-Infrequent Access (S3 One Zone-IA) after 30 days and moves previous object versions to S3 Glacier Deep Archive after 1 day
  B. Create an S3 lifecycle policy for the bucket that moves current object versions from S3 Standard storage to S3 Glacier after 30 days and moves previous object versions to S3 Glacier Deep Archive after 1 day

  ---

  Explanation/Reference:

• Question 553:

  A company has a popular gaming platform running on AWS. The application is sensitive to latency because latency can impact the user experience and Introduce unfair advantages to some prayers. The application la deployed In a very AWS Region. It runs on Amazon FC2 Instances Vial are part of Auto Scaling groups configured behind Application Load Balancers (ALBs) A solutions architect needs to implement a mechanism to monitor the hearth of the application and redirect traffic to healthy endpoints.

  Which solution meets these requirements?

  A. Configure an accelerator In AWS Global Accelerator Add a listens for the port that the application listens on. and attach it to a Regional endpoint m each Region Add the ALB as the endpoint
  B. Create an Amazon CloudFron4t distribution and specify the ALB as the origin server Configure the cache behaviour to use origin cache headers Use AWS Lambda functions to optimize the traffic
  C. Create an Amazon CloudFront distribution and specify Amazon S3 as the origin server. Configure tie cache behaviour to use origin cache headers Use AWS Lambda functions to optimize the traffic
  D. Configure an Amazon DynamoDB database to serve as the data store tor the application Create a DynamoDB Accelerator (DAX) cluster to act as the m-memory cache for DynamoDB hosting the application data
  A. Configure an accelerator In AWS Global Accelerator Add a listens for the port that the application listens on. and attach it to a Regional endpoint m each Region Add the ALB as the endpoint

• Question 554:

  A company has several Amazon EC2 instances set up in a private subnet for security reasons These instances host applications that read and write large amounts of data to and from Amazon S3 regularly. Currently, subnet routing directs all the traffic destined for the internet through a NAT gateway The company wants to optimize the overall cost without impacting the ability of the application to communicate with Amazon S3 or the outside internet What should a solutions architect do to optimize costs?

  A. Create an additional NAT gateway Update the route table to route to the NAT gateway Update the network ACL to allow S3 traffic
  B. Create an internet gateway Update the route table to route traffic to the internet gateway Update the network ACL to allow S3 traffic.
  C. Create a VPC endpoint for Amazon S3 Attach an endpoint policy to the endpoint Update the route table to direct traffic to the VPC endpoint
  D. Create an AWS Lambda function outside of the VPC to handle S3 requests Attach an IAM policy to the EC2 instances, allowing them to invoke the Lambda function.
  C. Create a VPC endpoint for Amazon S3 Attach an endpoint policy to the endpoint Update the route table to direct traffic to the VPC endpoint

• Question 555:

  A company designed a stateless two-tier that uses Amazon EC2 in a single Availability Zone and an Amazon RDS multi-AZ DB instance. New company management wants to ensure the application is highly available.

  What should a solutions architect do to meet this requirement?

  A. Configure the application to use Multi-AZ EC2 Auto Scaling and create an Application Load Balancer.
  B. Configure the application to take snapshots of the EC2 instances and sends them to a different AWS Region.
  C. Configure the application to use Amazon Route 53 latency-based routing to feed requests to the application.
  D. Configure Amazon Route 53 rules to handle incoming requests and create a multi-AZ Application Load Balancer.
  A. Configure the application to use Multi-AZ EC2 Auto Scaling and create an Application Load Balancer.

  ---

  Explanation/Reference:

• Question 556:

  A company has an application that collects data from loT sensors on automobiles. The data is streamed and stored in Amazon S3 through Amazon Kinesis Date Firehose The data produces trillions of S3 objects each year. Each morning, the company uses the data from the previous 30 days to retrain a suite of machine learning (ML) models.

  Four times each year, the company uses the data from the previous 12 months to perform analysis and train other ML models The data must be available with minimal delay for up to 1 year. After 1 year, the data must be retained for archival purposes.

  Which storage solution meets these requirements MOST cost-effectively?

  A. Use the S3 Intelligent-Tiering storage class. Create an S3 Lifecycle policy to transition objects to S3 Glacier Deep Archive after 1 year
  B. Use the S3 Intelligent-Tiering storage class. Configure S3 Intelligent-Tiering to automatically move objects to S3 Glacier Deep Archive after 1 year.
  C. Use the S3 Standard-Infrequent Access (S3 Standard-IA) storage class. Create an S3 Lifecycle policy to transition objects to S3 Glacier Deep Archive after 1 year.
  D. Use the S3 Standard storage class. Create an S3 Lifecycle policy to transition objects to S3 Standard-Infrequent Access (S3 Standard-IA) after 30 days, and then to S3 Glacier Deep Archive after 1 year.
  B. Use the S3 Intelligent-Tiering storage class. Configure S3 Intelligent-Tiering to automatically move objects to S3 Glacier Deep Archive after 1 year.

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/blogs/aws/s3-intelligent-tiering-adds-archive-access-tiers/

• Question 557:

  A company serves its website by using an Auto Scaling group of Amazon EC2 instances in a single AWS Region. The website does not require a database.

  The company is expanding, and the company's engineering team deploys the website to a second Region. The company wants to distribute traffic across both Regions to accommodate growth and for disaster recovery purposes. The solution should not serve traffic from a Region in which the website is unhealthy.

  Which policy or resource should the company use to meet these requirements?

  A. An Amazon Route 53 simple routing policy
  B. An Amazon Route 53 multivalue answer routing policy
  C. An Application Load Balancer in one Region with a target group that specifies the EC2 instance IDs from both Regions
  D. An Application Load Balancer in one Region with a target group that specifies the IP addresses of the EC2 instances from both Regions
  B. An Amazon Route 53 multivalue answer routing policy

  ---

  Explanation/Reference:

  Reference: https://aws.amazon.com/premiumsupport/knowledge-center/multivalue-versus-simple-policies/

• Question 558:

  A company receives structured and semi-structured data from various sources once every day. A solutions architect needs to design a solution that leverages big data processing frameworks. The data should be accessible using SQL queries and business intelligence tools.

  What should the solutions architect recommend to build the MOST high-performing solution?

  A. Use AWS Glue to process data and Amazon S3 to store data
  B. Use Amazon EMR to process data and Amazon Redshift to store data
  C. Use Amazon EC2 to process data and Amazon Elastic Block Store (Amazon EBS) to store data
  D. Use Amazon Kinesis Data Analytics to process data and Amazon Elastic File System (Amazon EFS) to store data
  A. Use AWS Glue to process data and Amazon S3 to store data

  ---

  Explanation/Reference:

• Question 559:

  A company is running a publicly accessible serverless application that uses Amazon API Gateway and AWS Lambda The application's traffic recently spiked due to fraudulent requests from botnets.

  Which steps should a solutions architect take to block requests from unauthorized users? (Select TWO.)

  A. Create a usage plan with an API key that is shared with genuine users only.
  B. Integrate logic within the Lambda function to ignore the requests from fraudulent addresses.
  C. Implement an AWS WAF rule to target malicious requests and trigger actions to filter them out.
  D. Convert the existing public API to a private API. Update the DNS records to redirect users to the new API endpoint.
  E. Create an IAM role for each user attempting to access the API. A user will assume the role when making the API call.
  A. Create a usage plan with an API key that is shared with genuine users only.
  C. Implement an AWS WAF rule to target malicious requests and trigger actions to filter them out.

  ---

  Explanation/Reference:

• Question 560:

  A company has implemented a self-managed DNS solution on three Amazon EC2 instances behind a Network Load Balancer (NLB) in the us-west-2 Region Most of the company's users are located in the United States and Europe The company wants to improve the performance and availability of the solution by using an AWS Region in Europe The company launches and configures three EC2 instances in the eu-west-1 Region and adds the EC2 instances as targets for a new NLB

  Which solutions will allow traffic to be routed to all the EC2 instances? (Select TWO )

  A. Create an Amazon Route 53 geoiocatton routing policy to route requests to one of the two NLBs Create an Amazon CloudFront distribution Use the Route 53 record as the distribution's origin
  B. Create a standard accelerator by using AWS Global Accelerator Create endpomt groups in us-west-2 and eu-west-1 Add the two NLBs as endpoints for the endpomt groups
  C. Attach Elastic IP addresses to the six EC2 instances Create an Amazon Route 53 geolocation routing policy to route requests to one of the six EC2 instances Create an Amazon CloudFront distribution Use the Route 53 record as the distribution's ongin.
  D. Create a standard accelerator by using AWS Global Accelerator Create endpomt groups in us-west-2 and eu-west-1 Add the six EC2 instances directly as endpoints for the endpomt groups Delete the NLBs
  E. Replace the two NLBs with two Application Load Balancers (ALBs) Create an Amazon Route 53 latency routing policy to route requests to one of the two ALBs Create an Amazon CloudFront distribution Use the Route 53 record as the distribution's origin
  A. Create an Amazon Route 53 geoiocatton routing policy to route requests to one of the two NLBs Create an Amazon CloudFront distribution Use the Route 53 record as the distribution's origin
  B. Create a standard accelerator by using AWS Global Accelerator Create endpomt groups in us-west-2 and eu-west-1 Add the two NLBs as endpoints for the endpomt groups